Designing secure access with ZTNA

Feed of NCSC blog posts and advisories (Apr–May 2026) covering defensive guidance and active threats. Key themes: guidance on designing Zero Trust Network Access (ZTNA); cautions about adopting agentic AI and using AI to find vulnerabilities; preparation for a large ‘vulnerability patch wave’ and raising security baselines; operational advice on SOC metrics; advocacy for passkeys as a replacement for passwords; international advisory and technical guidance on China‑linked covert networks of compromised edge devices (including recommendations to map and baseline edge/VPN/remote‑access traffic);